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Random number plays a key role in information science, especially in cryptography. Based on 
the probabilistic nature of quantum mechanics, quantum random number generators can produce 
genuine randomness. In particular, random numbers can be produced from laser phase fluctuations 
with a very high speed, typically in the Gbps regime. In this work, by developing a physical model, 
we investigate the origin of the randomness in quantum random number generators based on laser 
phase fluctuations. We show how the randomness essentially stems from spontaneous emissions. The 
laser phase fluctuation can be quantitatively evaluated from basic principles and also qualitatively 
explained by the Brownian motion model. After taking account of practical device precisions, we 
show that the randomness generation speed is limited by the finite resolution of detection devices. 
Our result also provides the optimal experiment design in order to achieve the maximum generation 
speed. 


I. INTRODUCTION 

Random numbers have vast applications in varieties 
of tasks, such as secure communication, numerical sim¬ 
ulation and lottery. With the development of quantum 
information science, random numbers are also indispens¬ 
able in many quantum information tasks. For example, 
in quantum key distribution (QKD) [Tj], random numbers 
are employed for the preparation of quantum states and 
the choice of measurement bases in order to guarantee 
its information-theoretical security. 

Generally, there are two categories of physical random 
number generators (RNGs). One type is based on clas¬ 
sical physics, whose randomness originates from the in¬ 
complete knowledge of the RNG system. For instance, 
classical RNGs can be based on chaotic behaviors of com¬ 
plicated systems such as semiconductor lasers Q. Since 
a full characterization of the randomness generation pro¬ 
cess may enable an adversary to deterministically predict 
the outcomes, this type of RNGs cannot generate prov¬ 
able randomness. The other type with a mechanism of 
measuring a quantum state is called quantum random 
number generators (QRNGs). According to the basic 
principles of quantum mechanics, true random numbers 
can be generated, which means that the outcomes can 
never be predicted before the measurement. 

QRNGs have developed a lot in the past decade. The 
simplest QRNG is shown in Fig. [TJ which is designed 
by performing single photon detections. Here, a single 
photon |+) = (| H) + \ V))/\/2, which is a superposition 
of polarization \H) and \V), passes through a balanced 
polarization beam splitter and then it is detected by sin¬ 
gle photon detectors Di and D 2 . The event of whether 
the detector D\ (D 2 ) click or not for each photon is the 
desired output random number. Till now, many QRNGs 
are of this type, however, their generation speed is limited 
by the dead time of the detectors SI- Subsequently, 
some other types of QRNGs have been proposed. One of 
them is based on quantum non-locality, where random¬ 
ness can be generated with very high security that even 
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FIG. 1. The simplest QRNG devices: a balanced polarization 
beam splitter and two single photon detectors D\ and D 2 . 

does not rely on the implementation [5[. The price paying 
for such high security is that the generation speed is so 
low that the random numbers cannot satisfy most prac¬ 
tical necessities. Another type measures the photon ar¬ 
rival time from a CW laser, and obtains random numbers 
from the timing measurement of single-photon detection 
relative to an external time reference [6h8(| . Restricted 
by the count rate of the detectors and time resolution of 
the time-to-digital converters, the generation speed can 
not be very high. Recently, a new type of QRNGs mea¬ 
suring phase fluctuations from lasers mm outperforms 
most of the existing ones in generation speed. Phase 
fluctuations is mainly caused by spontaneous emission of 
excited atoms of gain medium in a laser. As a direct ef¬ 
fect of vacuum state fluctuations, spontaneous emission 
is an excellent resource for extracting true randomness. 
In experiment, such QRNG based on vacuum fluctua¬ 
tion is realized with a very high generation speed, up 
to lGbps m, i2]. It is also shown that the generation 
speed has the potential to be extended to 10 Gbps and 
even lOOGbps [10]. 

Such a high speed of the QRNG based on phase fluc¬ 
tuations leads to a natural question that whether there is 
a limit of the generation speed. To answer this question, 
in our work, we investigate the randomness generation 
mechanism by following a derivation from first principles 
and use Brownian motion model to support it, which is 
a starting point to explore the limit of generation speed. 
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We also build a simple model to express the generation 
speed as a function of some device parameters. We show 
that the generation speed is finitely limited when consid¬ 
ering the precision or resolution of practical experiment 
instruments and give the optimal experiment design in 
order to achieve the maximum generation speed. 

The rest of this paper is organized as follows. In Sec. an 
we review the QRNG scheme and its underlying intuitive 
physical model. In Sec. IHIi we quantitatively derive the 
randomness output from first principles, which is also 
qualitatively explained by comparing the similarity with 
the Brownian motion model. In Sec. EO we show that 
the generation speed is finitely limited and give the opti¬ 
mal experiment design. Then we explain our result with 
device imperfection. We discuss another way quantifying 
randomness and conclude in Sec. m 


II. QRNG BASED ON VACUUM 
FLUCTUATIONS 

In this section, we review a typical QRNG scheme 
based on measuring the vacuum fluctuations of a laser 
H2|. As shown in Fig. [ 2 j a laser beam passes through 
a planar lightwave circuit Mach-Zehnder interferometer 
(PLC-MZI). Due to the spontaneous emission, there will 
be a phase fluctuation in the laser field compared to a 
plane wave function. The phase fluctuation is trans¬ 
formed into intensity fluctuation by the interferometer 
and then detected by the photodetector (PD). The out¬ 
put voltage from PD will be sampled and digitized by 
an 8 -bit analog-to-digital convertor (ADC), which will 
produce true random numbers. 


PLC-MZI 
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FIG. 2. The experiment setup of the QRNG based on phase 
fluctuation. (1) A 1.55 fim single mode cw distributed feed¬ 
back (DFB) diode laser (ILX lightwave); (2) a compact planar 
lightwave circuit Mach-Zehnder interferometer (PLC-MZI) 
with a 500ps delay difference; (3) a temperature controller 
used to stabilize the delay difference of PLC-MZI; (4)a 5GHZ 
InGaAs photodetector; (5)an 8-bit analog-to-digital convertor 
(ADC). 

To get the expression of the output randomness, let us 
first suppose that the lasing field can be expressed by 

E{t) = VS exp[i(<fo(i) + <£'(£))], (1) 

where 4>o(t) represents the phase of a plane wave, 
represents the phase fluctuations due to spontaneous 
emission as well as some other factors, and S represents 
the photon number intensity of E. Suppose the time 
delay between the two arms of the PLC-MZI is 77 , the 


measurement output voltage V(t), which is proportional 
to the interference probability, can be expressed by 

V(t) oc 2 E*(t)E(t + 77 ) sin(Aoc PA0'(t), ( 2 ) 

where P is the laser output power and A 4>'(t) = (j> f (t) — 
(j)'(t + 77 ) is the total phase fluctuations. 

The variance of the phase fluctuations is modeled by 

(A<fi\t) 2 ) = Q + C, (3) 

where Q/P and C stand for the contributions from spon¬ 
taneous emission and classical mechanisms, respectively. 
In experiment, in order to detect such a variance, we 
transform it into the variance of the output voltage by 
multiplying Eq. (|3]) by P 2 

(V 2 ) = AQP + ACP 2 + F, (4) 

where A is a constant coefficient and F is the background 
noise. The value of AQ, AC and F can be obtained 
by fitting experiment data of P and (V 2 ) according to 
Eq. (j4|). Then, the laser power P is chosen to maximize 
the quantum signal to classical noise ratio 7 

7= (5) 

7 ACP 2 + F [ ’ 

The process to obtain random numbers is shown in 
Fig. [3j where we use a 3-bit ADC instead of an 8 -bit one 
for simplicity. The output voltage is measured and dis¬ 
cretized by dividing its value range into 8 intervals. Each 
voltage interval corresponds to a 3-bit random number 
sequence. An 8 -bit ADC works similarly in practice. 

Finally, the method to quantify the random number 
generation speed is as follows. First it is necessary to 
quantify the output randomness per sample with the 
min-entropy function, 

Hoo(X) = - log 2 (max xe{0)1} n Pr[X = x]) , (6) 

where X stands for the n random numbers obtained . 
When assuming that the voltage follows a Guassian dis¬ 
tribution, as the true randomness comes only from the 
quantum contribution AQP in Eq. the maximum 
probability Pr[X = x] can be calculated from the quan¬ 
tum variance (Vq), 

« 3 > = (7) 

The maximum probability Pr[X = x\ equals the area 
of the biggest part under the Guassian function curve 

G(0, y/ (Vq)). Then we can calculate the output ran¬ 
domness per sample Ro and the generation speed is the 
product of Ro and the sampling rate. 

Therefore we can obtain the final randomness genera¬ 
tion rate by making the following assumptions, 

1. The phase difference (A<//(£) 2 ) is assumed to satisfy 
Eq. ©. 
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FIG. 3. Probability distribution of the output voltage. The 
a>axis stands for the output voltage and the y -axis stands for 
the probability density of the voltage. The value range of the 
output voltage will be divided to 8 intervals. If the voltage is 
measured to be in some interval, a 3-bit sequence of random 
numbers will be generated accordingly. However, due to the 
classical noises, we use (Vq) instead of ( V 2 ) to calculate the 
maximum probability. 


2. The output voltage V follows a Guassian distribu¬ 
tion. 

3. The random numbers generated from different sam¬ 
ples are mutually independent. 

In our work, we start from first principles to theoret¬ 
ically derive these assumptions. In the original experi¬ 
ment 0, the final QRNG speed is given by a product 
of the sampling frequency and the randomness output 
in each sample. It seems that the generation speed can 
infinitely increase with infinite sampling speed. While, 
we show a counter result. For given experiment setups, 
the generation speed is finite and maximized with a finite 
sampling speed. 


III. IMPROVEMENT OF PREVIOUS QRNG 
PHYSICAL MODEL 

In this section, we will start with randomness origin 
in laser source and then derive the assumptions 1 and 
2 with basic physical models from first principles. In 
assumption 1, the quantum contribution of phase fluctu¬ 
ations Q in Eq. © is a constant for given experimental 
parameters. Our result give an accurate expression of Q 
and show a linear relationship between Q and 77 . For as¬ 
sumption 2, we prove that the output voltage V follows 
a Guassian distribution indeed. Moreover, we will use a 
Brownian motion model to describe the behavior of the 
random phase and explain our result from an intuitive 
perspective. 


A. Randomness origin in laser source 

Let us first introduce the basics of lasers and the origin 
of the randomness from a laser source. The structure of 
a laser source mainly consists of an optical resonator and 
gain medium. The gain medium can be regarded as en¬ 
sembles of charged particles with two level energy levels 
denoted by a ground state | g) and an excited state \e). 
When a laser source is below the threshold, the popula¬ 
tion of the particles follows a Boltzmann distribution. If 
a population inversion is achieved due to some external 
factors, the laser source is above the threshold and begins 
to generate laser. Considering the interaction between 
atomic electron and electromagnetic field, a population 
inversion will lead to two kinds of photon emissions: stim¬ 
ulated emission and spontaneous emission. The former 
is of perfect monochromaticity with energy given by 

hv = E e - Eg, (8) 

where E e and E g are the energies of the excited and 
ground level, respectively. And the latter is the origin of 
randomness. 

The output state of spontaneous emission can be given 
by 

Mt)> = a(i)e“ iwot |e; 0) + b ks (t)e~ iuikt | g; 1), (9) 

k,s 

according to the Weisskopf-Wigner theory [14]. Here |0) 
and |1) denote the vacuum and single photon state re¬ 
spectively, a(t) and bk s (t) are the probability amplitude, 
k stands for the wave vector, ook = ck is the frequency of 
the photon, and 5 refers to the spin of the charged par¬ 
ticle. As ujk generally differs from v defined in Eq. ©, 
measuring the phase of the emitted photons produces 
random numbers with a similar mechanism as the single 
photon QRNG scheme illustrated in Fig. [TJ 

B. Variance of the quantum phase fluctuations 

Now, we derive the variance expression in Eq. ([3]) from 
first principles. To derive the dynamic evolution of the 
laser field, let us consider the laser field changes dur¬ 
ing an infinitesimal time interval St. Taking account of 
the stimulated and spontaneous emission, the laser field 
change can be given by 

E(t + St) - E(t) = [f ( E(t )) + E sp (t)\ St, (10) 

where E sp (t) corresponds to the laser field from sponta¬ 
neous emission and / ( E(t )) corresponds to the contribu¬ 
tions of stimulated emission and any other factors that 
may affect the laser field. Thus, the dynamic evolution 
of the laser field can be given by |l5.) 

*M = f(E(t))+E sp (t). (11) 
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For the laser field E expressed in Eq. ©, the total 
phase can be rewritten in detail 


= 4>o(t) + <M*) + <t> 8 p(t), (12) 

where and </> sp (t) represent the classical and quan¬ 

tum phase noise respectively. The total phase dynami¬ 
cally evolves according to 


d 4>{t) 
d t 


1 Im(£*(f)^®) 


S(t) 


d t 


lm[E*(t)f{E(t))\ Tm[E*(t)E ap (t)] 

S(t ) + S(t) 

Im [ e -^W/ (E(t))\ Im E sp {t)] 


VW) 


VW) 


The evolution of the phase 0 sp (£) is thus given by 


(13) 


dM*) _lm[e-^E sp (t)] 

-*r= —— sp()- ( } 


Due to the Weisskopf-Wigner theory, the emitted field 
E sp by spontaneous emission is a white noise. Thus, we 
can regard F sp (t) as i.i.d. for different time. 

In the experiment setup in the last section, the time 
delay between the two arms in the PLC-MZI is 77 . Then 
the phase difference A 0 sp induced by quantum sponta¬ 
neous emission is 


A0 S 


rto 

= 0sp(^o T 77 ) 0sp(^o) = / 

Jt 0 


to+Tl 


F sp (t)dt. (15) 


The variance of the quantum phase fluctuation can be 
written as 


/ / p 0+Tl 

(A K) = ([J t F ^) dt 

f pto+n \ f [ 

1 F - A,>d, )(i 


to 
pto + Tl 

/ (F sp (^)F S p(^ , ))d^d^ , 

Jto 

R S p 

2(5) 


F sp (t')dt‘ 


pto+T l 

/ 5(t — t')dtdt' 

Jt 0 


_ -^spT7 

' W 

Here, we make use of the autocorrelation of F sp (t) 


(16) 


So we can draw a conclusion with the deduction above 
that the variance of the quantum phase fluctuations 
(A (j) 2 ) oc 77 . Moreover, the same result can be interpreted 
physically with a Brownian motion model. 

Brownian motion is a physical phenomenon which de¬ 
scribes the random motion behavior of tiny particles sus¬ 
pended in a fluid. Due to the collision of the molecules 
in the fluid, the tiny particles will move randomly. Ein¬ 
stein’s theory about the Brownian motion shows that the 
variance of the displacement of the tiny particle is linearly 
proportional to the elapsed time, which is very similar to 
Eq. (j20j). 

Considering the complex laser field as a vector in two- 
dimensional coordinates, when a photon is added to the 
field by spontaneous emission, as shown in Fig. 0J there 
will be a small shift both in phase and amplitude 0 - 
Due to the property of spontaneous emission, each incre¬ 
ment caused by a photon emitted is completely random 
in direction and with a constant step length. Thus, the 
lasing field vector can be regarded as a two dimensional 
random walk, which can be proved to be a Brownian 
motion process 0 - Then we can draw the same conclu¬ 
sion that the variance of the quantum phase fluctuations 
(A0 2 ) oc r with the characteristics of Brownian motion 
process. 



FIG. 4. The laser field changes A E for the increment of a 
single photon. The length of A E is equal to 1 and the phase 
of A E is completely random. It has the same physical picture 
as a step of a two dimensional random walk from 4 to B, 
which has been proved to be a Brownian motion. 

Generally, when a laser source is above the threshold, 
its output power P is proportional to the photon number 
intensity S [l5i] 

P = C(S ), (19) 


(■ F sp (t)F s * p (t - n)) = Mzzl, (17) 

which is derived from the aforementioned white noise as¬ 
sumption with an autocorrelation function 


(• E sp{t)E* p {t - Ti)) = R sp S(ti). (18) 

We refer to Ref. [l5[ for detail derivation of Eq. (tTTll . 


where C is a constant determined by intrinsic parameters 
of a laser diode. Thus, we derive the first assumption 

(A4 2 p) = (20) 

Compared with Eq. m, we can easily get 
^_ CR sp n 


2 


( 21 ) 
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As for assumption 2, to see why the voltage V follows 
a Gaussian distribution, we only need to prove that the 
phase difference A</> sp follows the same distribution ac¬ 
cording to Eq. (j2j) and Eq. ©• From the definition in 
Eq. (HU), we can think that A0 sp is the sum of N iden¬ 
tically independent distributed (i.i.d.) variables, where 
each one is given by 

t + Tl/N 

F sp (t')dt'. (22) 

Due to the central limit theorem, we can easily conclude 
that Ac/) follows a Gaussian distribution and its variance 
is given in Eq. m- 


IV. MAXIMIZE OUTPUT RANDOMNESS AND 
GENERATION SPEED 


In previous experiments, the random number genera¬ 
tion speed is the product of the output randomness per 
sample and the sampling rate. Even with perfect detec¬ 
tors, the QRNG speed is limited by the sampling rate 
0- That is, the output randomness per sample is fi¬ 
nite. On the other hand, it seems that the generation 
speed will infinitely increase with infinite sampling rate. 
In this section, we calculate the randomness output for 
given experiment setups. We show that the output ran¬ 
domness and random number generation speed are max¬ 
imized with finite sampling rate when other experiment 
parameters are fixed. 

In our analysis, the time delay 77 and the sampling time 
interval r s are free variables. As the PLC-MZI interferes 
two laser beams whose emission time difference is 77 , we 
can equivalently regard it as that the interference comes 
from two points in the same beam with time difference 
77 . As shown in Fig. [5] (a), we can think the point A and 
B interfere for example. 


(a) 


1 x, 


AA/WVWVm AA/WVWVWW 


(b) 


I u 


1 T, 1 1 


M/WWVWW A/WWWVWW 


FIG. 5. (a) The output of the PLC-MZI in each sample can 
be regarded as a interference from points A and B in the same 
beam with time difference 77 . (b) When the sampling rate in¬ 
creases, there will be an overlap between different samples, 
and the quantum randomness A0 sp is not mutually indepen¬ 
dent for different samples. 


When 77 < r s , the quantum randomness A0 sp in 
Eq. (fl5j) are independent between different samples. This 
is because the integral of F sp (£), which is i.i.d., does not 


overlap between different samples. We thus show the as¬ 
sumption 3 is correct for 77 < r s . It is straightforward 
to see that, the output randomness will increase with in¬ 
creasing sampling speed as long as the condition 77 < r s 
holds. 

On the other hand, as shown in Fig. [5] (b), when 
77 > t s , the quantum randomness A 0 sp are not inde¬ 
pendent for different samples. The random output A</> sp 
for successive samples have overlapped integrals, thus are 
dependent on each other. In this case, we disprove the 
assumption 3 for 77 > r s . When the sampling rate is high 
enough, we can think 77 is an integer multiple of r s . Then 
as shown in Appendix, this situation can be regarded as 
that the random numbers are generated with a smaller r[ 
that t[ = r s , and we can equivalently quantify the output 
randomness with the parameters r[ and r s . 

Thus, when considering the maximum production of 
randomness, we can always focus on the case of 77 = r s . 
Then we just need to optimize 77 to achieve the most 
output randomness. First, the coherence time r c can be 
defined by that the variance of 0 sp changes (27r) 2 , 

(A/) = = (2 *) 2 . (23) 

In this case, we can rewrite Eq. m by 

(A0 2 )=4tt 2 ^, (24) 

T c 

and the variance of the output voltage is given by 

(Vo) = AP 2 { Ac/) 2 ) = 4AP 2 n 2 — . (25) 

T c 

The output voltage follows a Gaussian distribution, and 
the output random number is from the voltage in a cer¬ 
tain interval. In the practical scenario where there might 
exist classical noises and potential adversaries, the mini¬ 
mum randomness for each sampling, as shown in Fig. [6j 
can be given by 



(26) 

where 4>( x ) is the cumulative distribution function of a 
standard Gaussian Distribution, a is the length of a volt¬ 
age interval, and A is a constant determined by experi¬ 
ment parameters according to 


a / t 7 

47 tP V A 


(27) 


In a fixed sample time T, the total output randomness 
is 


T 

Riot Rq 5 

T s 



2<F 




( 28 ) 
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votage 


FIG. 6. A shift of the voltage partition caused by classical 
noise and potential adversaries will always reduce the output 
randomness per sample, and the randomness has a minimum 
with the partition here, which represents the worst case. 


where we make use of the relation 77 = r s . Moreover, if 
we multiply Eq. ([28]) by 1/T, the result stands for the 
random number generation speed R s , 


R s 




(29) 


Here, we show the relationship between R s and 77 in 
Fig. m We can see that the generation speed R s has 
a maximum. 



resolution of the ADC. In Eq. ([24]) . we can see that the 
variance of the detected random number is linearly pro¬ 
portional to the sampling time interval when r 8 = 77 . 
With increasing sampling speed, the sampling time in¬ 
terval r s will decrease. When r s is small enough, the 
detected random numbers will lie almost always in the 
same interval of the ADC. In other words, we will not 
detect the quantum noise. In this case, the output ran¬ 
domness in each sample is almost zero as can be inferred 
from Eq. ([26]) . Therefore, considering the resolution of 
ADC, the output randomness will be upper bounded with 
a finite value. Additionally, in experiment, if a high res¬ 
olution ADC is not available, we will add a high gain 
amplifier after the photo-detector, which is equivalently 
to increase parameter A in Eq. However, combining 
Eq. (|4|) and Eq. ([25]) we can see that the additional clas¬ 
sical noise introduced will increase with sampling rate, 
that is to say, the extra noise contributed by the ampli¬ 
fier may overpower the benefit it brings in. 

On the other hand, it is interesting to see whether the 
resolution is the ultimate restriction of the generation 
speed. When the resolution is almost infinite, can we 
get infinite randomness output with the discussed exper¬ 
iment setup? Here, we show that even if the resolution 
of the ADC can be infinite, the generation speed will 
not increase infinitely. Given a perfect photon-number 
resolving detector, the upper bound of the min-entropy 
is determined by the photon number within the detec¬ 
tion time window 0- Suppose that the maximum of 
the photon number detected per sample is N, the total 
randomness output in the setup, as shown in Fig. [2j is 
at most log 2 (N + 1) ~ log 2 N (when the photon num¬ 
bers detected per sample follows a uniform distribution). 
That is to say, the upper bound of randomness extracted 
per sample is about log 2 N. Actually the value of the 
voltage measured with the ADC is discrete. As the sam¬ 
pling rate increases, the voltage measured by the ADC 
will finally fix at some certain value and the output ran¬ 
domness will be zero. Therefore, there still exists a limit 
of the speed of generating random numbers. 

Moreover, here we assume that the response time of 
the photo-detector is small enough to be ignored. In 
practice, the photo-detector has finite bandwidth, so the 
detection can be understood as an integral process over 
a certain time interval, which is the origin of detector 
response time. If we consider it in our model, we only 
need to replace 77 with 77 + r r , where r r represents the 
detector response time satisfying r s > r r and r c > r r [9]. 


FIG. 7. The unit of the random number generation speed R s 
and the time delay difference 77 are bit/s and s respectively. 
To merely show their relationship, we set the constant A to be 
ly/s for simplicity. Then we can see that R s has a maximum 
at 77 = 0.88s. In experiment, the actual value of the optimized 
77 can be calculated similarly with an accurate A. 

The existence of maximum generation speed can be in¬ 
tuitively explained, which is mainly owing to the finite 


V. DISCUSSION AND CONCLUSION 

In randomness evaluation, we quantify it with min- 
entropy. In a sense, we assume that the classical noise is 
known to the adversary but not malicious. In a recent 
work, the malicious classical noise scenario is considered 
by quantifying the randomness with conditional min- 
entropy |l9|. Assuming the classical noise e to be also 
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Gaussian, in our min-entropy formula, Eq. (j6j), Pr(Y) 
should be replaced with a conditional probability Pr(X|e) 
to calculate the conditional min-entropy H c . When the 
adversary is assumed to have full control over the clas¬ 
sical noise, the conditional min-entropy minimizing H c 
over e should be used in the worst case scenario. On the 
other hand, when the adversary is restricted to passive 
eavesdropping, the conditional min-entropy averaging H c 
on the distribution of e is used instead. Here we point 
out that the quantification of randomness in our model 
is quite similar to the worst-case conditional min-entropy 
when the variance of e is small enough, which needs more 
study in the future work. 

In conclusion, by reviewing the QRNG scheme and its 
underlying intuitive physical model, we derive the as¬ 
sumptions and provide a more rigorous models for the 
QRNG based on vacuum fluctuation. Our result suggest 
that random number generation speed in such a QRNG 
is finitely bounded in practice and the device parameters 
can be optimized to maximize the generation speed. 
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Appendix A: Demonstration of the equivalence of 
output randomness in two situations: r s <C 77 and 

Ta = t[ 

In this appendix, we show the output randomness gen¬ 
erated in two situations: r s <C 77 and r s = r[ are the 
same. First, we need to notice that when the sampling 
rate is high enough, we can think 77 be an integer multiple 
of t§. That is, 77 = nr s , where n is a positive integer. 


Here, denote the phase by 0/~ with label k representing 
time sequence, then the raw data can be given by 

d \ = 0 n +1 — 01, 

d 2 = 0n+2 — 02, (Al) 

In experiment, autocorrelation of the random numbers 
{dk} in the situation r s 77 is very high. To reduce 
the autocorrelation, “exclusive OR” operations can be 
applied to every two adjacent sequences of random num¬ 
bers, as shown in Fig.[8j After the exclusive or operation, 
we can get new sequences of random numbers 

d'i = d ,2 ~ d\ = 077 ,-)-2 ~ 0n+i — (02 — 01), 

d f 2 = ds - d 2 = 0n+3 - 0n+2 “ (03 ~ 02), (A2) 

__ 

A A A A A _ "■ _ A-l An A + 1 A + 2 

by K b 3 \ b„_, b n b n+l * 

T l'= T s 

FIG. 8. After a exclusive or operation between every two 
adjacent sequences of random numbers, the new sequences 
can be expressed as fr n +i — &i, 5 n +2 — b 2 , .... 

Denote bk = dk+i — d then we can see from the main 
context that bk are independent random numbers. Then, 
we can express the d! k by 

di = b n -\-1 b \, 

d 2 = b n+2 -b 2 , (A3) 

Then, we can easily see that the randomness of {bk} 
is the same to the one of {d' k } in the asymptotic case. 
While the randomness of {bk} is generated when we have 
an equivalent interferometer with r[ = r s . 
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